1 |
# |
2 |
# pam_winbind configuration file |
3 |
# |
4 |
# /etc/security/pam_winbind.conf |
5 |
# |
6 |
|
7 |
[global] |
8 |
|
9 |
# turn on debugging |
10 |
;debug = no |
11 |
|
12 |
# turn on extended PAM state debugging |
13 |
;debug_state = no |
14 |
|
15 |
# request a cached login if possible |
16 |
# (needs "winbind offline logon = yes" in smb.conf) |
17 |
;cached_login = no |
18 |
|
19 |
# authenticate using kerberos |
20 |
;krb5_auth = no |
21 |
|
22 |
# when using kerberos, request a "FILE" krb5 credential cache type |
23 |
# (leave empty to just do krb5 authentication but not have a ticket |
24 |
# afterwards) |
25 |
;krb5_ccache_type = |
26 |
|
27 |
# make successful authentication dependend on membership of one SID |
28 |
# (can also take a name) |
29 |
;require_membership_of = |
30 |
|
31 |
# password expiry warning period in days |
32 |
;warn_pwd_expire = 14 |
33 |
|
34 |
# omit pam conversations |
35 |
;silent = no |
36 |
|
37 |
# create homedirectory on the fly |
38 |
;mkhomedir = no |